https://nakedsecurity.sophos.com/2015/11/04/vbulletin-enforces-password-reset-after-website-attack/ Did anyone hear about this? Send your condolences.